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1 . (Previously Presented) A data processing system, comprising: 

a first processing resource in the form of a web server coupleable to an open 
communications network; and 

a second processing resource in the form of a back end server coupleable to 
said first processing resource; 

said first processing resource and said second processing resource being 
configured to establish a communications relationship between them through a non-network 
connected communications channel, whereby said second processing resource is restricted to 
implementing an instruction communicated from said first processing resource which only 
performs a predetenriined allowable operation, thereby inliibiting compromise of said second 
processing resource. 

2-101, (Canceled) 

102. (Previously Presented) A data processing system as in claim 1, where said first 
processing resource is configured to transmit said instruction to said second processing 
resource for said instruction satisfying a predetermined criterion. 

103. (Previously Presented) A data processing system as in claim 1 , where said first 
processing resource is configured to transmit said instruction to said second processing 
resource and where said second processing resource is configured to execute said instruction 
for said instruction satisfying a predetermined criterion. 
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104. (Previously Presented) A data processing system according to claim 103, said 
predetermined criterion comprising said instruction being included in a predefined set of 
allowable instructions for said second processing resource. 

105. (Previously Presented) A data processing system according to claim 102 9 said 
predetermined criterion comprising said instruction being identified as an allowable 
instruction for said second processing resource. 

106. (Previously Presented) A data processing system according to claim 103, said second 
processing resource being configured to transmit an instruction fail message to said first 
processing resource responsive to said second processing resource determining said 
instruction failing to satisfy said predetermined criterion. 

107. (Previously Presented) A data processing system according to claim 1, said second 
processing resource comprising a database of executable instructions defining predetermined 
allowable functionality of said second processing resource. 

108. (Previously Presented) A data processing system according to claim 1 , said instruction 
comprising a computer program procedure name. 

109. (Previously Presented) A data processing system according to claim 102, said second 
processing resource configured to provide a reply message to said first processing resource 
responsive to an instruction satisfying said predetermined criterion. 
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110. (Previously Presented) A data processing system according to claim 1, said first 
processing resource comprising a storage medium configured to store said instruction in a 
queue prior to transmission to said second processing resource. 

111. (Previously Presented) A data processing system according to claim 1, said instruction 
being comprised in a message for transmission to said second processing resource. 

112. (Previously Presented) A data processing system according to claim 111, said first 
processing resource comprising a storage medium configured to store said message in a queue 
prior to transmission to said second processing resource. 

113. (Previously Presented) A data processing system according to claim 111, wherein said 
message includes an instruction type and said first processing resource configured to include 
in said message an action code indicative of the instruction type. 

114. (Previously Presented) A data processing system according to claim 111, said first 
processing resource comprising a storage medium configured to store said message prior to 
transmission to said second processing resource, said message including an instruction type, 
said first processing resource being further configured to include in said message an action 
code indicative of the instruction type, and said first processing resource configured to store 
said message in accordance with a priority assigned to said action code. 
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115. (Previously Presented) A data processing system according to claim 1 1 1, said first 
processing resource comprising a storage medium configured to store said message prior to 
transmission to said second processing resource said first processing resource configured to 
store messages in accordance with their chronological order. 

1 1 6. (Previously Presented) A data processing system according to claim 114, said first 
processing resource being configured to select a stored message for transmission to said 
second processing resource in accordance with a priority determined by said action code of 
said message. 

1 17. (Previously Presented) A data processing system according to claim 1 , said first 
processing resource configured to transmit said instruction or a message including said 
instruction responsive to receiving a communication comprising sensitive information and to 
discard said sensitive information from said first processing resource. 

118. (Previously Presented) A data processing system according to claim 1 17, said message 
representing sensitive information derived from said communication. 

1 1 9. (Previously Presented) A data processing system according to claim 1 1 7, wherein said 
sensitive information is discarded in response to transmission of said message comprising 
sensitive iriformation to said second processing resource. 

120-124. (Canceled) 
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125. (Previously Presented) A data processing apparatus, comprising: 

a first processing resource in the form of a web server coupleable to an open 
communications network and to a non-network connected commimications channel; said first 
processing resource being configured to transmit an instruction to a second processing 
resource in the form of a back end server disposed in a non-open network coupled data 
processing apparatus responsive to receiving a communication via said communications 
channel and for said instruction satisfying a predetermined criterion. 

126. (Previously Presented) A data processing apparatus according to claim 125, farmer 
comprising a storage medium to store said instruction in a queue prior to transmission to said 
second processing resource. 

127. (Previously Presented) A data processing apparatus according to claim 125, wherein said 
first processing resource is configured to form a message including said instruction for 
transmission to said second processing resource. 

128. (Previously Presented) A data processing apparatus according to claim 127, wherein said 
message includes an instruction type and wherein said first processing resource is configured 
to include in said message an action code indicative of an instruction type. 

129. (Previously Presented) A data processing apparatus according to claim 128, wherein said 
first processing resource is configured to store messages in accordance with a priority 
assigned to said action code. 
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130. (Previously Presented) A data processing apparatus according to claim 127, Wherein said 
first processing resource is configured to store messages in accordance with their 
chronological order. 

131. (Previously Presented) A data processing apparatus according to claim 127, said first 
processing resource being configured to transmit said instruction or message responsive to 
receiving a communication comprising sensitive information and to remove at least that part 
of said communication comprising said sensitive information from said first processing 
resource. 

132. (Previously Presented) A data processing apparatus according claim 125, said instruction 
comprising a computer program procedure name. 

133. (Previously Presented) A data processing apparatus according to claim 132, said 
predetermined criterion comprising said instruction or said computer program procedure 
being included in a predefined set of allowable instructions or computer program procedures 
for said second processing resource. 

134. (Previously Presented) A data processing apparatus according to claim 132, said 
predetermined criterion comprising said instruction or said computer program procedure 
being identified as an allowable instruction or computer program procedure for said second 
processing resource. 

135. (Currently Amended) A data processing apparatus, comprising: 

a second processing resource in the form of a back end server that is 
configured to respond to an instruction received through a n on-network connected 
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communic^ ™ ?* r/ha-rmel fr om another processing resource in the form of a web server 
disposed in another data processing apparatus to execute only instructions satisfying a. 
predetermined criterion. 

136. (Previously Presented) A data processing apparatus according tp claim 135, further 
comprising a database of executable instructions defining predetermined allowable 
functionality of said data processing apparatus. 

137. (Previously Presented) A data processing apparatus according to claim 135, said 
instruction comprising a computer program procedure name. 

138. (Previously Presented) A data processing apparatus according to claim 137, said 
predetermined criterion comprising said instruction or said computer program procedure 
being included in a predefined set of allowable instructions or computer program procedures 
for said second processing resource. 

139. (Previously Presented) A data processing apparatus according to claim 137, said 
predetermined criterion comprising said instruction or computer program procedure being 
identified as an allowable instruction or computer program procedure for said second 
processing resource. 
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140. (Previously Presented) A method for operating a processing system including a first 
processing resource in the form of a web server coupleable to an open communications 
network and a second processing resource in the form of a back end server, the method 
comprising: 

establishing a communications relationship between said first and second 
processing resource through a non-network connected communications channel whereby said 
second processing resource is restricted to implementing an instruction communicated from 
said first processing resource which only performs a predetermined allowable operation, 
thereby inhibiting compromise of said second processing resource. 

141. (Previously Presented) A method according to claim 140, said first processing resource 
transmitting said instruction to said second processing resource for said instruction satisfying 
a predetermined criterion. 

142. (Previously Presented) A method according to claim 140, said first processing resource 
transmitting said instruction to said second processing resource, and said second processing 
resource executing said instruction only if said instruction satisfies a predetermined criterion. 

143. (Previously Presented) A method according to claim 142, said predetermined criterion 
comprising said instruction being included in a predetermined set of allowable instructions 
for said second processing resource. 

144. (Previously Presented) A method according to claim 141, said predetermined criterion 
comprising said instruction being identified as an allowable instruction by said second 
processing resource. 
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145. (Previously Presented) A method according to claim 142, further comprising said second 
processing resource transmitting an instruction fail message to said first processing resource 
responsive to said second processing resource detainining said instructioii failing to satisfy 
said predetermined criterion. 

146. (Previously Presented) A method according to claim 140, said second processing 
resource comprising a database of executable instnictions defining predetermined allowable 
functionality of said second processing resource. 

147. (Previously Presented) A method according to claim 146, further comprising said 
second processing resource comparing said instruction with said database of executable 
instructions for determining whether said instruction is an allowable instruction. 

148. (Previously Presented) A method according to claim 140, said instruction comprising a 
computer program procedure name. 

149. (Previously Presented) A method according to claim 141, further comprising said 
second processing resource providing a reply message to said first processing resource 
responsive to said second processing resource determming that an instruction satisfies said 
predetermined criterion. 

1 50. (Previously Presented) A method according to claim 140, further comprising said first 
processing resource storing said instruction in a queue prior to transmitting said instruction to 
said second processing resource. 
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151 . (Previously Presented) A method according to claim 140, said first processing resource 
forming a message comprising said instruction and transmitting said message to said second 
processing resource. 

1 52. (Previously Presented) A method according to claim 151, further comprising said first 
processing resource storing said message in a queue prior to transmitting said message to said 
processing resource. 

153. (Previously Presented) A method according to claim 151, further comprising said first 
processing resource forming said message to include an action code indicative of an 
instruction type included in said message. 

154. (Previously Presented) A method according to claim 153, further comprising said first 
processing resource storing said message in accordance with a priority assigned to said action 
code. 

1 55. (Previously Presented) A method according to claim 151, further comprising said first 
processing resource storing said message in accordance with a chronological order. 

1 56. (Previously Presented) A method according to claim 1 53, further comprising said first 
processing resource transmitting a message to said second processing resource in accordance 
with a priority determined by said action code of said message. 

157. (Previously Presented) A method according to claim 151, further comprising said first 
processing resource transmitting said instruction or message in response to receiving a 

tl 
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communication comprising sensitive information and discarding said sensitive information 
from said first processing resource. 

158. (Previously Presented) A method according to claim 151, further comprising said first 
processing resource deriving sensitive information from a communication and including said 
sensitive information in said message. 

159. (Previously Presented) A method according to claim 158, further comprising said first 
processing resource discarding said sensitive information in response to a transmission of said 
message comprising said sensitive information to said second processing resource. 

160. (Previously Presented) A method according to claim 158, further comprising said first 
processing resource discarding said sensitive information within a predetermined time period. 

161 . (Previously Presented) A method according to claim 160, wherein said time period is 
one of the following: (1) less than 2 minutes from receipt of said communication, (2) less 
than 1 minute from receipt of said communication or (3) the shortest time possible from 
receipt of said communication. 

162-174. (Canceled) 

175. (Previously Presented) A carrier medium comprising computer machine readable 
instructions, translatable for configuring a data processing apparatus or system to include or 
establish a communications relationship through a non-network connected communication 
channel between a first processing resource in the form of a web server coupleable to an open 
communications network and a second processing resource in the form of a back end server 
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whereby said second processing resource is restricted to implementing an instruction 
communicated from said first processing resource which only performs a predetermined 
allowable operation thereby inhibiting compromise of said second processing resource. 

176. (Previously Presented) A carrier medium according to claim 175 9 further translatable for 
configuring said data processing apparatus or system to transmit said instruction from said 
first processing resource to said second processing resource for said instruction satisfying a 
predetermined criterion. 

1 77. (Previously Presented) A carrier medium according to claim 175, further translatable for 
configuring said data processing apparatus or system to transmit said instruction from said 
first processing resource to said second processing resource, and said second processing 
resource executing said instruction only if said instruction satisfies a predetermined criterion. 

178. (Previously Presented) A carrier medium according to claim 175 3 where said carrier 
medium comprises at least one of the following: 

a solid-state memory; 

a magnetic tape memory medium; 

a magnetic disc; and 

an optical storage medium. 

179. (Cancelled) 
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1 80. (Previously Presented) A carrier medium comprising computer or machine readable 
instructions for configuring a data processing apparatus or system comprising a first 
processing resource in the form of a web server coupleable to an open communications 
network and a second processing resource in the form of a back end server to establish a 
communications relationship between said first and second processing resources through a 
non-network connected communication channel; and 

to transmit an instruction from said first processing resource to said processing 
resource for said instruction satisfying a predetermined criterion, whereby said second 
processing resource is restricted to implementing an instruction, communicated from said first 
processing resource which only performs a predetermined allowable operation, thereby 
inhibiting compromise of said second processing resource. 

181 . (Previously Presented) A carrier medium as in claim 1 80, said second processing 
resource executing said instruction only if said instruction satisfies said predetermined 
criterion, 

182. (Previously Presented) A carrier medium in accordance with claim 180, said carrier 
medium comprising at least one of the following: 

a solid-state memory; 

a magnetic tape memory medium; 

a magnetic disc; and 

an optical storage medium. 
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183. (Previously Presented) A data processing system according to claim 1, wherein the 
system is configured to operate in a command mode for transmitting commands from the 
second processing resource to the first processing resource, 

184. (Previously Presented) A data processing system according to claim 1 17, said first 
processing resource being configured to discard said sensitive information within a 
predetermined time period. 

185. (Previously Presented) A data processing system according to claim 1 84, wherein said 
time period is one of the following; (1) less than two minutes from receipt of said 
communication or (2) the shortest possible time from receipt of said communication. 

186. (Previously Presented) A method according to claim 140, further comprising operating 
the processing system in a command mode for transmitting commands from the second 
processing resource to the first processing resource. 
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